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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



Application Number : 10/022,438 Confirmation No.: 5099 

Applicant : Allison Stoltz et al. 

Filed : December 20, 2001 

Title : SYSTEM AND METHOD FOR RISK ASSESSMENT 

TC/Art Unit : 3623 

Examiner: : David ROBERTSON 

Docket No. : 52493.000230 

Customer No. : 21967 



U.S. Patent and Trademark Office 
Conrniissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

Petition to Withdraw Holding of Abandonment Based on Failure to Receive 
Notice of Non-Compliant Amendment Pursuant to 37 C.F.R. §1.181 

Dear Sir: 

This petition is presented for the purpose of requesting withdrawal of the holding of 
abandonment. Provided herewith is evidence that Applicant did not receive a copy of the Notice 
of Non-Compliant Amendment allegedly mailed November 6, 2008 in the above-captioned 
application. 

Applicant received a Notice of Abandonment mailed May 13, 2009, alleging the above- 
captioned application was abandoned for failure to properly respond to the Notice of Non- 
Compliant Amendment dated November 6, 2008. 

Neither Applicant nor Applicant's undersigned representatives received a copy of the 

Notice. 

The address of record to which the Notice was supposedly mailed is: Hunton & Williams 
LLP, Intellectual Property Department, 1900 K Street, N.W., Suite 1200, Washington, D.C. 
20006-1 109, which is the mail repository for all in-coming mail from the PTO. Applicant's 
representatives enter all in-coming mail from the PTO in its docketing system. Had Applicant's 
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representatives received the Notice, the response due date would have been entered into the 
docketing system for December 6, 2008. 

Attached hereto is Exhibit A, a declaration of James R. Miner, the attorney responsible 
for prosecuting the above-captioned application, indicating that the Notice was not received at 
the correspondence address of record, and that a search of the practitioner's records, including 
the file jacket and the application contents, indicates that the Office action was not received. 

Also attached hereto is Exhibit B, a redacted copy of the master docket for the firm, 
where the non-received Office action would have been entered had it been received. The 
redacted copy of the master docket for the firm shows all replies docketed for the day of 
December 6, 2008, which includes the date one month from the alleged mail date of the Notice 
when the response would have been due. The docket reveals that no Response due date was 
docketed for the above-captioned application. 

Also attached hereto is Exhibit C, a copy of the PTO mail log for the firm, where the non- 
received Office action would appear had it been received. The copy of the mail log for the firm 
shows all PTO correspondence received from the day of November 4, 2008 to December 8, 
2008. The mail log reveals that no correspondence from the PTO was received in the above- 
captioned application. 

The evidence presented herein shows that neither Applicant nor Applicant's 
representatives received the Notice allegedly mailed November 6, 2008. Accordingly, Applicant 
respectfully requests withdrawal of the holding of abandonment. Applicant further requests that 
a new Notice be issued and mailed to the mailing address of record. 

In addition. Applicant submits herewith a Reply to the Notice of Non-Compliant 
Amendment. 
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It is respectfully submitted that no fee is required for consideration of this Petition. 
However, in the event any fee is deemed necessary, the Commissioner is authorized to charge 
the undersigned's Deposit Account No. 50-0206. 



HUNTON & WILLIAMS 

INTELLECTUAL PROPERTY DEPARTMENT 

1900 K Street, Nw, Suite 1200 

Washington, D.C. 20006-1109 

(202) 955-1500 (Telephone) 

(202) 778-2201 (Facsimile) 

JRM/dpm 



HUNTON & WILLIAMS LLP 



Dated: May 21, 2009 




Telephone Number 703-714-7449 
(Direct) 
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EXHIBIT A 
Declaration of James R. Miner 
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IN THE UNITED STATES PATENT AND TRADEMARK OFHCE 



Application Number : 10/022,438 Confirmation No.: 5099 

Applicant : Allison Stoltz et al. 

Filed : December 20, 2001 

Title : SYSTEM AND METHOD FOR RISK ASSESSMENT 

TC/ArtUnit : 3623 

Examiner: : David ROBERTSON 

Docket No. : 52493.000230 

Customer No. : 21967 



U.S. Patent and Trademark Office 
Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

Declaration of James R. Miner 

I, James R. Miner, registration number 40,444, do hereby state as follows: 

1) I am the attorney responsible for prosecuting the above-captioned application. 

2) I am of counsel in the law firm of Hunton & Williams LLP, and I am familiar with the 
firm's docketing and in-coming mail procedures. To the extent I may not be completely 
cognizant of the applicable procedures for the present case, I have consulted with individuals at 
my firm responsible for these duties to become familiar with the procedures. 

3) My firm, Hunton & Williams LLP, is currently prosecuting this application. The address 
of record is: Hunton & Williams LLP, Intellectual Property Department, 1900 K Street, N.W., 
Suite 1200, Washington, D.C. 20006-1 109, which is the mail repository for all in-coming mail 
from the PTO. 



1 



Patent Application 
U.S. Application No.: 10/022,438 
Attorney Docket No.: 52493.000230 



4) Our docketing department enters all in-coming mail from the PTO in its docketing 
system. Had my firm received the Notice of Non-Compliant Amendment allegedly mailed 
November 6, 2008 ("Notice"), the response due date would have been entered into the docketing 
system for December 6, 2008. I have reviewed a copy of the master docket report for the day of 
December 6, 2008, and discovered that no response due date was docketed for the above- 
captioned application. 

5) Our docketing department keeps a mail log for all in-coming mail from the PTO. Had 
my firm received the Notice of Non-Compliant Amendment allegedly mailed November 6, 2008 

("Notice"), the Notice would appear on the firm's PTO mail log. I have reviewed a copy of the 
mail log from the day of November 4, 2008 to December 8, 2008, and discovered that no 
correspondence was received for the above-captioned application. 

6) Finally, I personally reviewed the file jacket for evidence of a paper copy of the Notice 
and found none. 

I further declare that all statements made herein of my own knowledge are true and that 
all statements made on information and belief are believed to be true; and further that these 
statements were made with the knowledge that willful false statements and the like so made are 
punishable by fine or imprisonment, or both, under section 1001 of Title 18 of the United States 
Code, and that such willful false statements may jeopardize the validity of the application or any 
patent issuing thereon. 



Date: May 21, 2009 
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EXHIBIT B 
Redacted Master Docket Report For 
December 6, 2008 
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EXHroiT C 
Hunton & Williams U.S.P.T.O. Mail Log 
for November 4, 2008 to December 8, 2008 
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EXHIBIT D 

Reply to the Notice of Non-Compliant Amendment 
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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



Application Number : 10/022,438 Confirmation No.: 5099 

Applicant : Allison Stoltz et al. 

Filed : December 20, 2001 

Title : SYSTEM AND METHOD FOR RISK ASSESSMENT 

TC/Art Unit : 3623 

Examiner: : David ROBERTSON 

Docket No. : 52493.000230 

Customer No. : 21967 



U.S. Patent and Trademark Office 
Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

RESPONSE TO NOTICE OF NON-COMPLIANT AMENDMENT 
IN COMPLIANCE WITH 37 C. F. R. § 1.121 

Sir: 

Responsive to the attached U.S. Patent and Trademark Office "Notice of Non-Compliant 
Amendment" mailed November 6, 2008, Applicant resubmits herewith (as specified in boxes 4 C 
and E of the Notice): 

1. Listing of the claims with proper status identifiers, including the proper status 
identifier for Claim 20, which begin on page 3. 

Accordingly, it is now respectfully requested that the Response to the Non-final Office 
Action filed on October 9, 2008 is complete. 
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FEES 

Please charge any shortage in fees due in connection with the filing of this paper, 
including extension of time fees, to Deposit Account 50-0206, and please credit any excess fees 
to such deposit account. 

Respectfully submitted. 



Dated: May 21, 2009 

HuNTON & Williams LLP 
1 75 1 Pinnacle Drive, Suite 1 700 Attorney for Applicant 

McLean, V A 22 1 02 Registration No. 40,444 

Phone 703-714-7400 
Fax 703-714-7410 
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IN THE CLAIMS : 

A listing of the status of all claims 1-26 in the present patent application is provided 

below: 

1 . (Currently Amended) A computer implemented method for use in compliance 
management, comprising: 

presenting, via a computer network, a user with a series of questions relating to at 
least one business category; 

soliciting, via the computer network, a response from the user for each question 

presented; 

determining a detection index based on the number of responses, and 
corresponding answers, to each of the series of questions; 

determining an occurrence index based on tiie potential consequence of non- 
compliance; 

determining a standard severity risk index based on the expected severity of non- 
compliance; aftd 

prioritizing, via the computer network, the at least one business category based on 
the user's responses and at least one total risk score comprising the product of tiie detection, 
occurrence and standard severity risk indices ; and 

displaving tiie prioritized at leas t one business cateeorv and at least one total risk 

score . 

2. (Currently Amended) The computer implemented method of claim 1 wherein 
the user response comprises a "Yes" or "No. 

3. (Currently Amended) The computer implemented method of claim 1 wherein 
the at least one standard severity risk index comprises a number between 1 and 10 corresponding 
to a specific level of risk. 

4. (Currently Amended) The computer implemented method of claim 3 wherein 
the number "1" comprises the lowest level of risk severity, and the number "10" the highest level 
of severity. 

5. (Currently Amended) The computer implemented method of claim 1 wherein 
the at least one standard severity risk index corresponds to the at least one business category. 
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6. (Currently Amended) The computer implemented method of claim 1 further 
comprising the step of determining a detection index based on the number of questions presented 
in the series of questions, the user's responses, and the number of users. 

7. (Canceled) 

8. (Canceled) 

9. (Currently Amended) The computer implemented method of claim 1 further 
comprising ranking the at least one business category based on the at least one total risk score. 

10. (Currently Amended) A computer based system for use in compliance 
management, comprising: 

a query module associated with an engine for presenting at least one user with a series of 
questions relating to at least one business category, and for soliciting and receiving responses 
from the at least one user for each question presented; 

a prioritization module associated with the engine for: (1) determining a detection index 
based on the number of responses to each of the series of questions, determining an occurrence 
index based on the potential consequence of non-compliance, and determining a standard 
severity risk index based on the expected severity of non-compliance, and (2) prioritizing the at 
least one business category based on the at least one user's responses and at least one total risk 
score comprising the product of a detection, occurrence and standard severity risk indices : and 

an administration module associated with the engine for displaying the prioritized at least 
one business category and the at least one total risk score . 

1 1 . (Currently Amended) The computer based system of claim 10 wherein the series 
of questions are presented to the user over a communications network. 

12. (Currently Amended) The computer based system of claim 10 further 
comprising an the:administration module associated with the engine for inputting, updating and 
accessing data associated with the query and prioritization modules, the administration module 
being accessible to an administrator of the system via an administration interface, 

13. (Currently Amended) The computer based system of claim 10 wherein the user 
response comprises a "Yes" or "No" response. 

14. (Currently Amended) The computer based system of claim 10 wherein the at 
least one standard severity risk index comprises a number between 1 and 10 corresponding to a 
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specific level of risk. 

15. (Currently Amended) The computer based system of claim 14 wherein the 
number "1" comprises the lowest level of severity, and the number "10" the highest level of 
severity. 

16. (Currently Amended) The computer based system of claim 10 wherein the at 
least one standard severity risk index corresponds to the at least one business category. 

17. (Currently Amended) The computer based system of claim 1 0 wherein the 
detection index is based on the number of questions presented in the series of questions, the at 
least one user's responses, and the number of users. 

18. (Canceled) 

19. (Canceled) 

20. (Currently Amended) The computer based system of claim 1 0 wherein 
prioritization module further ranks the at least one business category based on the at least one 
total risk score. 

2 1 . (Currently Amended) The computer implemented method of claim 1 wherein 
the detection is determined by the following formula: 

^i(#of answers,.) 

Detection index = — . 

(d)(n) 

wherein / refers to each possible response, 

# of answers, refers to the number of queries or questions that were answered with a 
particular response /, 

n refers to the total number of queries or questions in that category, and 

d refers to the number of departments or units responding. 
22. (Currently Amended) The computer implemented method of claim 1 , wherein the 
occurrence index weighs the total risk score based on the potential consequences of non- 
compliance. 
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23 . (Currently Amended) The computer implemented method of claim 1 , wherein 
the potential consequence of non-compliance is based on the total number of agents or 
employees affected by non-compliance. 

24. (Currently Amended) The computer implemented method of claim 1 , wherein 
the potential consequence of non-compliance is based on the total number of policies in force. 

25. (Currently Amended) A computer implemented method for use in compliance 
management, comprising: 

presenting, via a computer network, at least one user with a series of questions 
relating to at least one business category; 

soliciting, via the computer network, a response from the at least one user for each 
question presented; 

determining a detection index based directly on the number of responses to each 
of the series of questions; 

assessing a potential consequence of non-compliance, the potential consequence 
of non-compliance relating to parameters and the values of such parameters; 

determining an occurrence index based directly on the potential consequence of 
non-compliance that was assessed, such that the occurrence index changes as the parameters 
associated with the potential consequence of non-compliance change, the occurrence index that 
is determined being one of at least three possible occurrence indices, the at least three possible 
occurrence indices being provided as possible occurrence indices; 

determining a standard severity risk index based directly on the expected severity 
of non-compliance; and 

prioritizing, via the computer network, the at least one business category based on 
the at least one user's responses and at least one total risk score, the at least one total risk score 
being based on the detection index, the occurrence index, and standard severity risk index; and 
the total risk score being determined as equal to the product of the detection index, the 
occurrence index, and the severity risk index, such that the higher the total risk score, the more 
severe the risk of non-compliance; and 

wherein the determining being performed such that: 

the detection index weighing the total risk score based on the responses provided 
6 
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to the individual questions; 

the occurrence index weighing the total risk score based on the potential 
consequences of non-compliance; and 

the severity risk index weighing the total risk score based on the expected severity 
of non-compliance; and 

the method further including associating each business category with particular detection, 
occurrence, and severity risk indices. 

26. (Currently Amended) The computer implemented method of claim 1 wherein 
the detection index is determined by a relationship between the number of queries or questions 
that were answered with a particular response, the total number of queries or questions in the 
category, and the number of departments or units responding. 
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